One of my first blog posts was about a similar system, though much simpler/naive and based on trusting an email address to distribute shards. Its failure point

One of my first blog posts was about a similar system, though much simpler/naive and based on trusting an email address to distribute shards. Its failure point boiled down to letting the user save the other shard. Maybe a 3-shard scheme could help redundancy and loss tolerance. https://francoisbest.com/posts/2020/password-reset-for-e2ee-apps https://francoisbest.com/posts/2020/password-reset-for-e2ee-...